MAL-2025-139936 Malicious code in bellatrix-eris-yaml-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d825d7641d6215aaad20f1c38ef478c8fe5bff6645108b2dc855cae94a207880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141435 Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145730 Malicious code in oauth-farout-corvus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776aa8f7c9d309fe1c7adf4274314326d23bbc25bb64f2734590f54fd5bf25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149158 Malicious code in virgo-halley-norma-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd7da4e4986eec5dab4e8e83d3b4496f034399ef46a1ac01bc2c091f61fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144606 Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147832 Malicious code in semantic-release-native-server-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149260 Malicious code in warp-aldebaran-eslint-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3d94674faa2d791badc098c041f3b61d7592d45cedc12a36f44ce3b39077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144081 Malicious code in jwt-nebula-module-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9bff033dd6f4cd1ea320753374935ff75fd394a2a0fbd8a15fcfa1243ddaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146256 Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140296 Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141426 Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65efd88af0ad0e19aaa51594495daaf09c8f860e4679abb776dab88ae7805818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149559 Malicious code in wolf-polaris-zenith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1643ba9c60e4293e98858a7181689d7e040b596aac65aeef89d18ba0c6ea3ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141010 Malicious code in concurrently-ophiuchus-cordelia-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e47618e5d0ca1380ac6b5315c5c9c7f14e7db876525828a16091163fa78518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141917 Malicious code in electron-fornax-testcafe-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e6fd8c4dcf774ad276826eeba711a2d2ff461fa4ae94f3b74e2d259b6c1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141358 Malicious code in csv-sedna-epimetheus-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5060dfd3949e3872cfe6c37f816c552aa746dfd9a6dc0404a706d24cc47b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139956 Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144820 Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149795 Malicious code in yaml-meissa-metalsmith-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813c135c90f9f7d46aa55e10b0dc894ba8db0b83c98c60e70abb69347031ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...